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Abstrac t 


The epfitting of a problem into subprcblems often 
Involves the a 34 s variable appearing in more than one of the 
SLJtproftl em*. Th.it wake* thets sUbprotlemB dependant upon one 
another since a solution to one may not qjstlty as a solution to 
another- A tup tltje method of splitting re deteribed Which 
first oibtaina solutions by relaxing the dependency requirement 
and then atte»pta to rsconeila solutions to different 
subprobIema. The method has been realized as part of an 
automatic theorem proper programmed in LISP which takes advantage 
Of th* procedural pouar that LISP provides. The program ha a had 
success ufth cryptarithaetlc problems, probltat frou th* blocks 
world, and has been used as a subroutine in a plane geometry 
theorem prover- 


This report describes research done at the Artificial Intelligence 
Laboratory of the Masqathusetts Institute of Technology, Support 
for the laboratory's artificial intelligence research Ts provided 
in part by the Advanced Research Projects Agency of the Department 
of Defense under Office of Naval Research contract W0001^—70—A- 
03B2-DOQ3. 
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1 - leltfltitfct loo 

Thft splitting of a preplan into subprebIems often 
involves the -Same variable appearing in more than one of the 
subprobl Dinar This makes these subproblems dependent upon one 
another since a solution to one *ay not qualify sb a solution to 
another* This paper describes a two stage method of splitting 
which d) first solves the aubprObEems as If they were 
independent ( 1 , 0 , completely relates the dependency requirement) 
and 12) then attempts to reconcile solutions to different 
aubprgbl ems. The advantages of this approach [ Ee in the economy 
derived from usking only a single pass at finding solution* and 
in the abilEty to use global knowledge about the solutions 
obtained In stays I to assist the search for g reconciliation of 
these solueiont in stage 2* 

A possible disadvantage of this method is that it could 
be difficult to decide when to stop searching for unconstrained 
solutions to a subprobIem in stage l, particularly when the set 
of such solutions night be quite large* In order to make this 
method work, for an interesting class of problems, heuristics Here 
employed to prevent tbs search taking too long in cases where the 
number of solutions is infinite or very large* In particular, 
every case to a split need not be handled during th* re I nation 
stage; sobs may be postponed to the reconciliation stage where 
constraints arising fro« the other cases can be brought to bear. 
The astl-iod has been realized as part of an automatic theorem 
prover programmed in LESP* The program has had Success with 
cryptarrthinetic problems 19 f , problems from the blocks world 
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I13J , 9nd hag been used 93 9 subroutine in 9 plans geometry 
theorem prover ifl] * 

The reconpi J1 a t tan stage hears 3 r»eBl»bl ance to 
constraint method? such S3 Utetf in 133 , The reconciliation Stag* 
alsg can be thought of as an attempt to 'debug - solutions which 
were obtained by first ignoring interactions between subpraD I erne 
and therefore is related to U23. The overall approach to 
splitting is related to metnods used In 923 where the 
investigation of a eubproblem resulted in the assignment of a 
type to a variable appearing In that subproblem. Although the 
present procedure la oriented more to problems which allow tor 
explicit enumeration of solutions, it would not b-e adverse to the 
addition of a tgpe theory mechanism, 

The logical formal I ®e under lying the program Is presented 
In section 2 and some considerations of a semantic nature are 
discussed in section 3* The program also can sake use of 
procedural knowledge as in 111, (21, 123+ 141+ IS I , 111 > and this 
facility is described in section 4+ The relaxation and 
reconoi|let ion stages are examined in sections 5 and 6 
respectively. Section 2 Mill provide some illustrative examples 
Of the program's performance. 

2- The Logical Deduction Holes 

The reader It rsfftrred to 1101 for background material on 
predicate calculus theorem provers. It will be assumed that the 
negation of the yoa I it to be regarded as a true formula, all 
formulae are In prpnex form, and all existential variables have 
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been replaced by fkftlgti functions 11 &3. He adsst I he convent ion 
that E and E' always represen t B.xpr ess i ona which have been made 
identical by the unification algorithm (101 , The theorem proven 
has as Its logical basis the following 11 ryles p# inference? 

HI, A problem is solved utisr it has been established that both 
the literals A" and ~A are true, 

H2, Replace formula by A. 

H3. Replace formula.ArB by A, 0, 

R4, Replace formula w<As,©) by <vA + 

tl.-e, t# one wishes to prove AvB, then either 
prove A or prove 01 , 

RE. Replace formula *IA-*BI by A, 

U,e. if one wishes to prove A-t0 t then 
assume A and prove 01. 

RE, (Modus ocnens] If It has bean established that A 1 and 
A-*B are true uhsre A is a literal* then add B + 
to the set of true formulas, 

R7. (Modus ponerst If it has been established that and 
A-B are true whsrs B it an atomic {omul a, then add 
'■A’ to the set of true forauias. 

RE. (Modus ponens) If It has b&Sh establ i shad that B' find 
A-*.^ are true uherg 0 1 s an atomic formula, then 
add ■^A > to the set of true formulas, 

RS, (Reasoning hy cases) If AvtJ is thus, then split 
AvB into case A and ease El, If A and fl Ore 
independent {1,0, A and 0 hav* no variables in commonl, 
then break the problem Into tuo subproblems by first 
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assuming A and then asauhing 0 + The treatmenl then wcn-iid 
da the seme a? in 171 where an intensive effort would be made 
to solve a case before resortirg to an additional case analysis 
and Hh*r e a mschan I shi for curbing tin explosion of cases Is 
employed, However, if A and B have a variable in Common, then 
the case analysis is conducted as described in sections 5 and S. 
fij.0- Rsplato formula MAaS) by -AwB, 

fill- (Equality relation} If r ■ t and Air I are true where 

A (r) is a literal in which the term r appears, then each 
occurrence pf r in Alrl is replaced by the tarn t. Thie 
treatment of equality is crude compared uith other automatic 
theorem provers [51, 171 and most likely would Inhibit 
the ability of the program to prove theorem* In subjects Pike 
group theory or number theory. However, there Is nothing 
about the present program which would prevent the introduction 
□f the more sophisticated treatment of equality which this 
author employed in 17f, 

The above rules are the sane as in 171 except as already noted 
with respect to ft3 and FtiL, The control structure governing the 
execution of these' rules also la the same as in 171. A comparison Of 
this system wi th resolution! theorem proving 11 @3 already has been 
presented In (71 and will not Os repeated here, The main objective of 
the present paper is to present a better approach to splitting than was 
employed in (7), 

2, Sona Semantic_ConsI derat ions 


The present use Of semantics bears a resemblance to the 



PAGE B 


"rods 1 " strategies uh-i dh have been used by reso 1 u11 on theorem 
pr overs 110). It is baasd upon the duality that 10 associated 
with different statements in the data base, for the statement “-A 
can be regarded as assorting that *A is true {pnd hence A is 
false! or it can be regarded as asserting that ue wish to prove 
A, From the point Of View of tbs formal logic* It makes no 
difference which Interpretation you choose. But from the point 
of view ©f the underlying semantics 1-t makes all ths difference 
in the world whether you bsIieve A to be false or whether you 
believe that you actually can prove A. The commonly held belief 
that predicate calculus theorem prevere reason only by 
"contradiction" I* rooted in the natron that the theorem prov^r 
either does not snelog semantics or else employs semantics which 
do not distinguish the denial of tbs statement to be proved from 
other statements in the data base. 

The pro-grae divides statements Into "facte’' and ’’goals." 
Initially, all awIDOs are regarded as facts and the negation of 
ths statement to be proved ig regarded as a goal* Two statements 
are not allowed to interact with each Other fas paired Inputs to 
the same Inference rule! unices ono of the statement* «S either 
the initial goal of a descendant of the initial goal. The 
Initial goaf therefore comprises a set of support 1141 * Of 
course., there is some flexibility as to what actually constitutes- 
the statement to be proved*. For example, the set of statements 
A, S, C, D, **€. could represent the Initial data bate as well as 
the set Of statements A. b* ^ [ LC/vD 3 -+E1 so far as the formal logic 
}g concerned. However, the latter representation would be 
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preferred if semantic con*I derations indicated that the 
hypotheses C and 0 were specifically related tD the goal Df 
proving E- tn the latter repressntation* C and D would de 
generated as descendants of the initial goal through the 
application of rule ft$ followed dy R3 whereas they would not Pe 
regarded a* descendant* Of the initial goaJ in the farmer 
representatichi 

A* a new statement is generated by a deduction rule* the 
program wakes a determination a* to whether the statement is a 
fact or a goal, in rule H3, a case is regarded as a god I if and 
only If the case has a negation sign at It* front and the formula 
being Spilt is a goal. Tho output Of rule RIB i s regarded as a 
goal if and only if the Input to that rule is a goal. If 
were a goal, rule RE would result in the output A treated as a 
fact and the output *6 as a goaf. For all the other deduction 
rules, an output is regarded as a goal if and only If one of the 
Inputs is b goal god tn* output has a negation sign at its front. 
Thus, the output B + of rule FIE would be a fact if A' were a fact 
since A“*B as the second input to RE could not possibly be a goal. 
This separation into facts and 50 a I* can ha Ip to control 
interactions in the data base. For SLppcse ~A and are goals 
and neither is an ancestor of the Other* the program then 
normally would allow and ^3 to interact uith each other but 
would not allow descendants of «A to interact with descendants of 
-B, 

Th* Symbol * has an I meor tant semantic role which has 
been neglected by resolution theorem provers, Aside fro* 
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assisting in the separation of Statements into Fact* and goal* aa 
iias just (laser i tied. Its pres since serves as a cub for the program 
Na#ely, the program interprets the statement A-*B in a wanner 
which rs different from the way it reacts to the logically 
equivalent ststtntnt ~AvB. The case analysis of ^AvB involves a 
co irin it went by the program to prove A so that B can be concluded. 
However, rule Ht applied to A-*a does not involve any commitment 
to prove A] it just says that if A alreadu PSi been regarded as 
true, then we can conclude 0. to particular, the program will 
mat conclude C-tB from the two statement* C-*A and A^B-, 

4. The Use .of Procedures 

While the program ia not Intended as a naw prog ram wing 
language, it does have features which make it a meaningful 
cm tens run of LISP + The theorem proven is a LISP function named 
□ER3YEX which operates upon three arguments (1) the initial i I et 
of formulas stripped of all quantifiers, t2I a list of variables 
whose values are desired as the answer to the problem, and (31 
MIL or T depending upon whether or not the request is for just 
one answer or for all possible answers, Ef if is desired that a 
particular formula A be an initial goal, then the formula would 
be coded as EGQALX A), 

Whenever a literal P(T1.,Tn) or a literal 
**P(TL,-.,, **Tnl has been established as true and ia ready for 
processing by the deduct!on rules, its predicate letter P is 
examined to se* whither It ia also a LISP function. If the 
answer is yes, thin F(T1,.■.++Tn) Is evaluated and. dispensing 





PAGE 9 


s 


upon the output from this evaluation, there would Oe four 
possible responses: (13 if the oupufc la T, the caas under 
consideration I b declared solved, (23 if the output is NIL, the 
literal i? rejected end therefore would not be applied to the 
deduction rules, (33 if the output Q ia a formula other than 

P (71 ,.,* + + Tn>, then i t replaces P [Tl*.Tnl and the resu i t i r>g 

formula 15, e« either Q or 43 depending upon whether the original 
literal was P(Tl,»*.*.Tnl or »PITl + * *,,,TnlI would await Its turn 
for processing by tne deduction rules, and (43 otherwise, the 
deduction continues as if the predicate letter P were not a LISP 
function* It should oe noted uith respect to the third 
possibility that the output Q does not hgv« to he another atomic 
formula like P(TI* * * * * *tnJ j a iso. -Q is regarded as a replacement 
for P(Tl,,,, * + Tn> and not as a descendant of P ITi,*,,,+In} + 

Since the the ore* proven DEREYEX ia a LIS? function, it 
can be used at 3 Subroutine by other LESP functions. In 
particular, s LlSP function that uses it night also be a 
predicate letter so that recursive applications of DEREVEX are 
possible, The theorem prover will I examine function letters and 
will execute them If they ?re also L3SP functions, The 
diffarence between the procedural treatment of function 1st tors 
and predicate letters ia tihat tha former are executed immediately 
whereas tha latter are executed only when appearing in a detached 
litoral uhioh la ready for processing by the deduction rules, 

T;h* formula AwB would be represented in LISP as 
(IMPLIES A fil. However, in that form it never would be weed *e 
an input to any of the the modus ponons rules ti*6+ RE, R7 or 
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flSl. [f ors uan-ted to allow for a possible app(ieatioft to rule 
RS t than. It would pe coded as MllPUES CRDUT]NEX A R) B> where R 
Is same LISP flirtation whose purpose is to screen out undesirable 
literals A ' from, appl scat ion to rule RG. If one -wanted to a I low 
for S possible application of A“G to air three «odus p-oners 
rules* then it would have to be Coded in the torn CiMPLLES 
[RDUTiNEN A FtU tfiCUTlNEX E R2I ] where the LISP functions FU and 
KZ would likewise hero filter out unpro H fata I « app I I ca 11 on* of 
these rules* The use of ROUTINES is at the discretion of the 
human programmer + The filter waul'd he disengaged by a choice of 
HL and K2 which always evaluated as T + An example of its 
nontrivial use is given- in section $ together wi th other 
facilities for representing knowledge in the form of procedures* 

5. Thr Re flwatior Slim 

Since the relaxation stage involves searching for "dll" 
Sol Lt ion 5 to a case, one eight object on the ground s that such a 
search could take too long lend in fact might never be 
completed)* However, the search does not have to be for alt 
possible solutions but rather for all solutions that can bs 
obtained When certain heuristics are employed. Moreover, this 
search need not be conducted for gvsry case generated by the 
spilt. 03 will be shown be law. The degree of success should 
depend upon the problem domain and the individual heuristics. 

The program in E7F searched for "" a ? f M bo I ut ions to the first case 
of a split and yet performed quits creditably in domain* juCh a* 
number theory and group theory* 
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Suppose the program u! to split thg- formyls ^ {*| vB U) 

into eases. Although #11 existential variables were removed at 
the out ee t by the 4hGleniiation process, the vari ab I e x. which 
appears in both cS = e = , will be eel led (as In (73 1 an 
■ exIstent i a I * vahisble since the object 3 1 to find seme value of 
h which jMI permit a solution to each ease* FI fit, an attempt 
is Pade To find value? of x which will solve the problem under 
the assumption that At*t Is true* After $13 the successful 
values Of x are recorded, the sane procedure is applied to Q (wl 
with x still treated as a variable and not constrs i r>ed only to 
those values that yielded solutions to the previous case MkI. 
Suppose that the formula 3 (yl -+ (C (yl vD (yii I is part of the data 
base tor case B(x). Then, the application of Blylwtt(y)vOSyl) 
with Btw} to rule R6 would natch the variables :* and y and 
generate the formula CSxlvDtxl. The formula C£x)vD(x) would 
become a candidate for Eplitting within the scope of case 0 (x) 
and the program would not hesitate to attempt such a split 
(unless a solution 0+ could be Found which did not retiuinc 

the assignment o f a specific value to eome existential variable 
appearing in B{x)J, However t suppose that insteac of 
B ty)-*tCtyl vDfyH + the formyls B (yl■+ (Cly,z) vD (y,it} had appeared 
in the date base where z is e variable that does net have an 
existential interpretation. The application of this formula with 
Blxl to rule RS would generate the formula C(x,z}vO(*, z) but 3n 
order- to split this letter formula an existential interpretation 
would have to be created for the variable E, Experience with £7i 
end the present program has indicated that It is usually not a 
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good idea to sllju 6 split if il) one 0** mare existential 
variables appease# SlrBady In the hypottvaaia of the the case 
under cons iderat 3 on amd 121 tha new split would areata one or 
mare additional existential variabl*B h So we did somethiny to 
prevent this additional splM* On* method is to use the tiller 
mechanism of section 4 by coding B (yl ^ (£ (y, zT vO (y, z)} 3a {EUPLIES 
(ROUTLNEX 0tyl Rl [Cfft Cfy,i) 0(y,z)ll where routina P would 
reject any formula that possessed flh exiatontia I variable* 
Alternatively, there is a -global variable which ia zero or one 
depending upon whether or not a case analysis is being conducted 
that already ha? generated existential variables; therefore., the 

routine P might reject a formula H thru global variable had the 
value zero. The program alad would reject auch a split 
3u toma11eaI I y if thfcr* were nested above it Q previous split 
which Violated the above principle regarding the 1 htrnduCt I Oh of 
existential variable? (L.e. even If the filter allowed: the 
program to attempt the ap I 1 t of CMx, zl vD f k + ;) in order to solve 
Or.c Of the oases of Afx)vB1x1 , it would never attempt a split of 
a3y E [ wlvFlwl involving another new ex:l s-teni i a I variable w if 
thi? latter formula were generated from either case Clx+zJ or 
case 0 lx, zJ 1 p 

A L1$P function called RECJJR5IVEX enables th# human user to 
inform the program that a particular caee Should be postponed 
until after the reat of the split ha? been solved; when this case 
finally la attempted, It is with values that ar? known to satisfy 
the other cases of the split. Thus, a split pf the formula 
A (* ) vRECLStS ] VEX '(B t x> I vC 1 x i would result in formulae S CK1 > , 
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B,.j 4 + +B (Kn) boing added to the data base mbere <1 + 

K2 T *■»... Kn represent the d i f f eren t solutions for w that uer? 
Obtained from sp Iitting Aixl [x> . These formulas 
5iKi).. < >»then would be available for Mae In an attempt to 
split same other formula OlyivELy), 

The motivation behind the mb* of RECURS[vEX is that there 
mi&ht fce semantic reasons for believing that a particular formula 
Blw) might be either (II too "expansive” if one of its 
existential variables x is a Mowed to be unconstrained ( i . e. the 
hypothesis BN) might generate too many formulas if * is 
unrestricted) or {2) might lend itself to recursive use in a 

manner that mould »ake the above heuri at i e governing the 
introduction of new e»istent ial variable a appear too severe a 
restriction. If either of these conditions prevailed, it mould 
be more appropriate to code 3(x) as RECURS)VEX(B lx)] . 

Another LISP function called 7ESTX postpones ac tion on a 
case until the reconciliation stage (as opposed to RECURS)VEX 
mhict* postpone? action until after the reconciliation stag* is 
completed). By coding 0 Lx) a? "ESTXtBtxl 1 the human user informs 
the program that Btxl Is to be executed as a U$P function 
whenever a value is assigned to any existential variaijie x 
appearing in B £x) s the assignment of such a value e to x mould be 
rejected if the execution of Btc) returned a value of MIL. 7ESTX 
aeans the case is to be used to test rather than generate new 
assignments to existential variables. For example, x > 0 
normal ly mould be Coded as TESTXfx > 0) since me do not mish to 
generate dl I the positive integers as values for x Out only to 
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test whether a particular value Is a positive integer* 

&* Jhe._Reconci I iatior Elaoe 

Throughout this section the word "var sable" will refer to 
ex i s lent i & I variable. The Input to the r ccnnc i 1 i at I tin stage 
cone lets of a list of alternative solutions tor each cane. Each 
alternative solution to a case represented as a li»t of 
attrlbut*-value pairs whore each attribute is either a variable, 
the symbol RECURS]VEX! or the synod TESTXI. Ef the attribute is 
a variable, then the value to which it is paired is its 
assignment for this particular solution, If the attribute is 
either HECURSIVEX1 or TE5TXL, then it is paired with the 
hypothesis of -3 case still to be soived as It corresponds to the 
application of RECURS]VEX or TESTX respectively as described in 
section 5. 

For each variable the progra* first constructs a 
constraint eat of values cons!stent.with the results of the 
relaxation stage. This constraint set is defined as the 
intersection of U£x h c} taken aver all ca-ses c where LKx. B c) is the 
9*t *f possible values for X 3a deter (lined from the various 
solutions to case c. Thus, if a solution to COOC c did not 
impose any restriction on th* variable x T then UC«;,C> would be 
the universal set consisting pf all dementi* Aled, U!*+c) would 
be taken as the universal set if 3 solution of x for CSSO C 
depended upon another existential variable y Ee.q. x - f(y) where 
f is a sStoleh function)* Otherwise, UHx.cl is just ths union of 
31 I value? of x obtained from all the solutions to case c. By 
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compy I i ng the constraint set for each variable, the program 3 s in 
a position tp [I> abandon the f econC i I i at 1 on search If the 
constraint set for SWte variable is empty and (21 reject a newly 
computed value of a variable if this value is not consistent ul th 
at least on* v@ I ye frt»» the constraint set of that variable. 

Ne*t, the progran makes a determinat1 on aa to the order 
In which cases are tb be reconciled, First priority is given to 
cases with the fewest number of alternative solutions, En the 
event of a tie, the case ie selected which involves the fewest 
number of “unbound" variables uhere a variable la said to be 
“bound" If i t b constraint set consist a of only a single element. 

Once a case is selected, its first alternative solution 
(consisting of a I let gf attribute-value pairal is examined, 

Each attrlbu to- value pair is processed In turn* Any variable 1 
appearing In. me list structure formed by the attribute-value 
pair Is replaced by its assigned value if such an assignitenk 
already had been mads from soma previous case. Let fA BI be the 
resulting attribute-value pair after these replacements tif any) 
hove been node, tf A is the symbol TE5TX1, then the express ion 3 
uould be evaluated end the current solution rejected should the 
evaluation return fa EL, If A Is neither th* symbol TE5TH1 nor 
RECURS!VEXL and either U) A is a variable which appears aa a 
supplement of B. (Zl 3 is a variable which appears as a 
Sube lament of A, or (31 neither A nor B are variables, then the 
theorem prever would attempt to prove A ■ B and would reject 
the current solution to th* ease if it failed ih the attempt, (f 
it succeeds in this attempt. It woulo return any values it might 
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have found for the variables in quest i on and then Mould continue 

with the next at tribute-value pair of the current solution. 

Suppose A nore a variable which was not a aubeleiuent of 
B. ]f 3 * Bfw} depended upon exactly one variable x and the 
constraint set Of x were f i nite* then- each value ft from the 

constraint set Of * mould be tested to see whether S(k) belonged 

to the constraint set Of A. If no value BOO so belonged. then 
the Current solution -would be rejected since it would he 
impossible for A to equal B- If exactly one Gift} belonged to the 

■ft 

constraint set of A h then this ix k> would be treated as a new 

a t tr i Oute-va I ue pair [i*-e. this k would be assigned as the value 

of variable xl . The program then would proceed as if 0 did not 
depend upon just one variable* In particular* all previously 
processed 3ttribute-vSi 00 pairs would be examined to see whether 
they Contained occurrences of the variable A, All such 
occurrences of A would be replaced by B and any pairs so involved 
would once again become candidates for processing In the same 
manner as has just bean described* 

I# all the attribute-vaIue pairs were processed 
successfully, then another case would be generated for 
reconciliation. A solution to the split would be obtained if no 
more cases remained to be reconciled* 1 t (11 this Split had only 
a single solution as its objective and (21 the solution that was 
just found did not necessitate the execution of another formula 
by virtu® Of a postponement through the use of RECURS] V£K, then 
an exit would bm »ad® from the reconci I Eat ion stage; otherwise, 
the program would record thi* solution [evert if it includes a 
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formula UhO-se execution has bean deferred} and then would 
backtrack in a search for additional solutions. 

Llfrfrn a solution to a case has bean abandoned, the newt 
alternated* solution would be e*Seined, [f there are no more 
alternative solutions to a case, the program would backtrack to 
the previous case and owes in* Its next alternative solution, An 
exit would Pe made from th* reconciliation Stag* when the first 
c-j a a ha* no mors alternative solutions to be examined, 

7, Sons 11 lostml** Examples 

This section will present an in depth description of two 
examples (run on a POP-10 computer i which- should illustrate many 
□ f the features of the program* Although the program has had 
success with other probl ams P such as provided by the FS.3.T* 
block* world (e«g, In a natter of seconds it can find the largest 
red cube or ai I arches on the table from situatione as complex as 
those considered In {131 J t their description would not shed much 
more light on the way the program operates. A iso, sine* the 
present progrse represents an improvement of an earlier theorem 
prover 171 which was successful in group theory and number 
theory;* there is reason to believe that the present program would 
have as much success in these same domains If givgn a comparable 
equality rule to work with. 

First,, a few LISP function* that *re u**d In these 
examples will be explained. J1INUSX, FLUSH, and T3MESH art 
arithmetic functions which correspond to subtract I on, addition* 
and multiplication respectively, MINU5X is a function of two 
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argument* defined by [MtNUSX w y] equals fPLQSX k [TlNE^X -1 y] J. 
PLUSX and XEtlESX arc functions of an indefinite number pf 
arguments uhose purpose ig to carry out addition and 
(nu I t i p I id at 1 on in the presence of variables to which numerical 
values *3y not yet have been assigned,, Thus, fPLU$X 3 -2 £} 
returns the value & but IPLU5X 3 x 4| would return the value 
(PUJSX * 7t if no numerical value had been assigned Co x, The 
expression 

ETIflESK 3 £ PLUSX (TIHESX 2 *) y 4 1M1NUSH z (TIMES:* 2 k)))) when 
evaluated would return (PLUSX (TEHESX 3 yl (T1ME5X 3 2 > 12) ♦ GEX 
is a function df two arguments. (GEX k y) returns £GEX k yt if 
either m pr y does not have a numerical value- □ theru i se, [LEX x 
y} returns T or ?J[|_ depending, upon whether or nq t * is as large a 
number aa y, 

7,1 tti ss 1 ona r i es and Cann i tiaa 

This taaX 131 hsa three missionaries and three cannibals 
who ui eh to cross a river from the left tP the right side. Their 
only means of conveyance is a boat which has a capacity of two 
people. Any of the missionaries or cannibals is capable of 
operating the boat either alone or with someone else. The 
problem ie tc determine a way by which ol l the missionaries and 
cannibals can be transported to th* right side without ever 
allowing the cannibals to outnumber the missionaries on any one 
side gince otherwise the missionaries on that side would bs 
da ten * 

Let CLEFT ox my) represent the assert Ion that it is 
possible tb transport all cannibals sod »isaIcnaries to the right 
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s i ne given that the Scat ie &n the lift side together with Cw 
cannibals and ny mi 99 icnari** + Let {RIGHT c* Hy> represent the 
assertion that it 19 possible to transport all mi se i onar i es and 
canni-hale to the right aide given that the heat is on the right 
side together with cx cannibal* and my »i 00 ionarics< The initial 
data base far this problem consists of the following three 
formulas where x and y shag Id be interpreted as referring to the 
number of cannibals and *isalonariea respectively being sent 
across in the boat: 


1* {GOAL)'! {NOT £ LEFT 3 3 H) which is the initial goal of proving 
{LEFT 3 3J* 


2 , 


(IMPLIES {AMO (TESTX IGEX cm xl) 

ITE5TX IGEX my W>1 

(QR (EQUALS * fli (EQUALS * 13 (EQUALS x 2)1 

(OR (EQUALS y 0} (EQUALS y 1) (EQUALS y 211 

(OR (EQUALS * {MINUS* 1 y3 3 (EQUALS * (MINUS* 2 ylll 

(OR (AND (EQUALS cm xl (EQUALS my y>> 

(ANQ (PR (EQUALS * (PLU5K Ck tniNUSM y my ID 
(EQUALS my yl 
(EQUALS y (MINUS* »y 31 M 
{RECURS(VEX (RIGHT (tilMUSK 3 (MIWUSX t* k3 1 

(mnusx 3 (minus* » y y n 

n m 


(routine* [left c* m y > truexii 


3* nIMPLIES (AND [TEST* (GE* cx *)1 

[TEST* ICEX tty tf )> 

(OR (EQUALS X 0) (EQUALS m U (EQUALS *2)1 
(DR (EQUALS y 0? {EQUALS y 11 (EQUALS y 2)1 
(OR (EQUALS v- (MINUS* 1 yll (EQUALS k (M3NU5X 2 V 11) 
(DR (EQUALS* x (PLUS* ok (MjHUSK y myl)1 
(EQUALS By yl 
(EQUALS y (MlttlaX my 3)) I 
(RECURSIVE* {LEFT {MINU5X 3 (MINUS* c* «H 

(KtNUSX 3 (MINUS* my y)>1)3 
(ROUT)NEK (RIGHT ex myI TRUE*)3 

TFLJEX is a function of one argument which always returns 


3 value Of T; its purpose )a to disengage the modus ponens 
fitter* The statea-ent (QE* e* x) says that the number of 
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tfinrtibsl* to be s&nt id the boat cannot exceed the number 
avgiJabla &rt that side of the river( houavgr* by; Coding, this 
statement as (TESTX (QEX C* x}} the human programmer has directSy 
informed the program that (C¥X C* is to Oe under tha control 
■of 7E&TH as described in section 5, 7he statement (OR (EQUALS * 

[Si]I^USX 1 (EQUALS x (rUNUSX 2 yiH *ays that the combined 
number of cannibals and missionaries to be sent in the boat rouEt 
be either L or 2. The satisfaclion of (AND (EQUALS ex *) (EQUALS 
my yt ? in formula 2 means that the problem would be solved since 
all remaining missionaries and cannibals would be in the boot and 
on their way to the right side of the rivtr. The statement (OR 
(EQUALS x (PLUSH c* (fllWJSK y my}}) (EQUALS my y) (EQUALS y 
(mMUSH «y 3))) saye that either an equal number of cannibals and 
missionaries must be left behind on shore after the boat departs 
(lit. Cx - w * my - y) or the number of missionaries being left 
behind (Le. my - y) is either 0 or 3j this expresses the 
r*quiremsnt that ■ i ss ionari es cannot be in the presence of a 
greater number gf cannibals,. Th* tta lament (RIGHT QDNUSK 3 
(rtEWUSX cx *H (HIHUSX 3 (ilEKUSH my y}}J S5yS that the problem 
now must be sol wed from a starting point which has the boat 
together with 3 - (Cx - x) cannibals and 3 - i-»y — y) 
misssion3ries on the right side of the r ivflr; by coding th»S 
statement with FttLiTrlp [ VEX. tho hwm$h prograttisr has direct 3 y 
informed the program that the statement is to be under the 
control 3f RECURSEVEX as described in sec tinn S. 

The program initially pairs formulas 1 and 2 to rule .i?7 
for cy - my - 3 and then^ after applying the output to rule Rifl k 
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it at temp ts to split the resulting formula, this split result* 
in the generator of ths three apditlonal formulas (WDT {RIGHT 1 
31)*. (NOT (RIGHT 2 0)i„ and tNOT {RIGHT 1 D) which in turn 
become candidates for application to the dsduction rules. The 
processing of (NOT (RIGHT 1 Pfl generates (NDT (LEFT 3 3H uhich 
is rejected since it i s an instance of 3 previous formula^ The 
processing of (NOT (RIGHT 2 0M generates WOT (LEFT 3 3>) (uhich 
again Is rejected) and also generals (WDT (LEFT 2 3t). The 
program continues in this earner and obtains a proof in three 
■minutes* In evaluating this per f orsance. it is well to Xe«p in 
mind that the missionaries and earniPa Is problem lends itself 
pore to a representation based upon GPS type operators (91 rather 
than upon the predicates of automatic theorem provers. 

7,2 CryptSrithmet1C 

This tes* F9I, 13) Involves the assignment pf a decimal 
digit to each of the letters of three yards so that the uu® Of 
the first two words equals the third word. No digit may be 
assigned tp mare than one letter antf no uord may have zero 
assigned to Its first letter* 

As a sample problem, consider DONALD + GERALD * ROBERT 
IS I + Although ths program solved this problem without hints. It 
nlI) be more Illustrative to examins hew the program attached 
this problem when provided with ths sasiE hint cf D =■ 5 that had 
been given elsewhere (91 to hu*an subjects. This problem is 
represented by the following formula where KL through K5 are the 
"carriet" from png coFumn to the ne*t which ths program must 


ds termine. 
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CGOALK (NDf (avd 


(OR 

(AND 

(AND 

{EQUALS 

(EQUALS 

{PLUSX 

(PLUSX 

0 

a 

01 

D> 

T) (EQUALS KS 0))■ 

(PLUSX 10 ill (EQUALS ITS D!) 


(Oft 

(AND 

(EQUALS 

[PLUSK 

L 

L 

K51 

R5 (EQUALS K4 

011 



(AND 

(EQUALS 

(PLUSX 

L 

L 

*5) 

(PLUSX 10 Rt 5 

(EQUALS K4 1) 

11 

(OR 

(AND 

(EQUALS 

(■PLUSX 

A 

A 

K4J 

E) (EQUALS K3 

Oil 



(AND 

(Equals 

[PLUSX 

A 

A 

X4J 

(PLUSK L0 El 5 

(EQUALS K3 11 

} 1 

{OR 

(AMD 

(EQUALS 

(PLUSX 

N 

R 

K3J 

B1 (EQUALS KZ 

01) 



(AND 

(EQUALS 

(PLUSX 

N 

R 

K3> 

iPLUK 10 Bl5 

(EQUALS K2 111 

1 

{OR 

(AND 

(EQUALS 

(PLUSX 

a 

E 

K2) 

0) (EQUALS K1 

DM 


{AND 

(EQUALS 

(EQUALS 
(PLUSK D 

(PLUSX Q 
G KV R1 

E 

KZi 

(pLusx IB on 

(EQUALS Ki 15 

13 


{EQUALS U 51 
[ GENERATOR* A fl 3) 

[GEneratork b a 9) 

(DENERATnRX D 1 3] 

(GENERATOR* E 0 31 
(GENERATOHX G 1 91 
(GENERATORS L B 31 
(GENERATORS H V 9) 

(GENERATORS 0 
(GENERATORS R 1 3) 

(GENERATORS I B 31 

(TESTS (EMSTSNCTK A S D E G L N D ft T)>>>> 

The- statement (DISTINCT* ABDEGLNDRT) in formula 
1 reflects- the requirement that dieti-net digits must be assigned 
to distinct letters (i.e- DIST1NCTX is a function of -an 
indefinite number of argumente which returns a value of NiL or T 
depending upon whether or not two of its arguments have identical 
valuesi- The ability to handle linear equations- (by solving for 
on* variable in ter#e of the othere! was built into the predicate 
EQUALS. Also* the expressions of the fan* (GENtRATQRX * y z> 
serve tD generate alternative solutions to a case by assigning 
integer values to variants * with the values ranging from y to X. 
The LISP function GENERATOR* wag used only to make the problem 
statement «ore compacts The problem was solved at about the same 
speed when statements Ilk* fGENEnATQRX A f) 95 were replaced by 

tOR (Equals a 01 (equals a il (equals ash. 

The program is asked to find values for the variables A + 
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BU D + E t G, L* 0 H R and T that nil! result in the aftainmeait 
at the goal * It tiepins by ape lying formula J to rule HI 8 and 
then attempt* Id *J>I (t the resulting formula. After completing 
the relaxation stage (i.e, solving the different cases 
independently), it constructs a constraint set f-0-r each variable 1 
and determines an order In uhich the different CtfeeS are to be 
reconciled,. The following description of the program’s attempt 
to reconcile the different solutions invitee corparison with 
human protocols recorded in 191, Although some amount of brute 
fence is intrinsic to the problae, the program it able to use Its 
Knowledge about the nature of these solutions Ce.g. they are 
distinct integers constrained by the results of the re I a* St i-on 
stage] to guide the search in an effective manner. 

First, It concludes D * 5 and R r □ + G + KL since these 
were the only bp lotions generated by their respective C-35BB + 
Therefore, R * 5 + G + K1. It then selects the case that had 
generated ths two alternativB solutions tlJ T » 2*0, K5 *» ® and 
(31 T - 2*0 - 15, K5 * li The. first alternative solution T - 
2*0, if5 * 8 >s rejected since it would inply T * 2*5 +* 18 which 
dees not fall within the constraint set for l {i.e. one cf thg 
integer p 0 through 91* Therefore, lf& » L and T - 2*0 - 15 * 2*5 
“■ IH ■ 0* The next case selected had generated the lug 
alternative solutions U) Kl - 5* E - -K2 and [21 Kl - l t E - 10 
- K2i It first a Studies KL * Q, E * ~K2 and notices that E is 
expressed in terms of 3 single variable K2. ■ t therefor® looks 

at the constraint set of K2 which consists of OnLy the v'a I ute 8 
and 1. fHousver- t It rejects the value K2 - 1 since that would 
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imply £ ■* -1 uhieh fails ou*s''EE the carsirairvt set for FL It 
therefore Ctmei Udes that K2 ■ 0, Eut this tau la quickly 
rejected since it Mould imply E ■ £5 - H unlch violates the- 
condition (activated tig the LE$P function 0t5T[HCTX] that no tuo 
tetters may have the sane decimot digits* Therefore, tfj, - 1 + E ■ 
10 - <2 3 nd hence ft ■ 5 + G + « G + G + Ortce again, tt looks 

at th* constraint set for K2 and rejects the value K2 - & sine® 
it uo-uld iffloiy E - 10 - <2 - 10 Mhich fall* Outside the 
constraint set for E* Therefore, K.2 -■ 1 and hence E - 10 - K2 - 
9. 

The ne*t case selected had generated the t«o alternative 
Solution* U> K3 •* 0, E - 2#A + <4 and (21 K3 -1* E - 2*A + K4 - 

19. St first assumes K3 » 3, E » 2*A + K4 and hence £*A +■ £4 - 9 

since E * 0- The theorem prtwer then proves 2*fA + 1^4 » 9 Oy 
solving this linear equation for the variable A. It gets A *4*5 
- ,5#K4 uhich suggests that it examine the constraint set of K4 
since A i» expressed in term* of the single variable K4. The 
value K4 * 0 Is rejected since A - 4*5 then would fail outside 
the constraint Sit for A. Therefore r k4 • 1 and hence A » 4* |t 

next select* the case (hat had yielded the two solutions [11 K4 — 

0, R - 2*L + K5 and (23 IC4 * 1* R - 2*L ■+■ KG -10 and rejects the 
first alternative since it contradicts KA * 1* Therefor*, R - 

+■ K5 -10* However* Sine* it already has deduced ICE * 1 and R 
* G +■ S, it cone luces G + E - 2*L - 9 Which whan solved for L 
gives L - 2*5 + •.&•£>. It then selects the case that had yielded 
the two solutions (1) K2 * 0, B - N + R + K3 and 12) K2 * 1, B * 

+ H + K3 -10 and rejects the first alternative sine a it 
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ton trfidic ts KZ « 1. Therefore* 0 N '+ R + K3 - 10. However* 
since it already Pel lavs* K3 * S and ft ■ C + G, il gets fi ■ N' + G 

— 4. Next, the program examines the cess that had produced the 

integers 1 through 3 39 possible values for R+ The value R - 9 
is rejected since this value already was assigned to £. The 
value R - S is quickly rejected sine* it results in G * R - & ■ 2 
and hence L - 7.E + -S*G - S,E which falls outside Ihe constraint 

sot of L- Ho-rfeve", the choice ft - 7 Is accepted as it results in 

C - 1. L - 3, and B’».N-+G-*4«rN-3 . The program cent i rues 
in this manner and eventual fy finds 0 -2, N»6, and B - 3 which 
solves the pro&i*** T he total elapsed time was AS seconds,. H 
took the program five minutes to compietc the more difficult 
problem of finding the solution without the hint of D - S. 
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